christmas/routes/wishlist/index.js

const verifyAuth = require('../../middlewares/verifyAuth');
const getProductName = require('get-product-name');
const express = require('express');
const config = require('../../config');
const u64 = require('u64')

const totals = wishlist => {
  let unpledged = 0;
  let pledged = 0;
  wishlist.forEach(wishItem => {
    if (wishItem.pledgedBy) pledged += 1;
    else unpledged += 1;
  });
  return { unpledged, pledged };
};

const ValidURL = (string) => { // Ty SO
  try {
    const url = new URL(string)
    if (process.env.SMILE !== 'false') {
      if (url.hostname === 'www.amazon.com') url.hostname = 'smile.amazon.com'
    }
    if (url) return url;
  } catch (_) {
    return false;  
  }
}

module.exports = (db) => {
  const router = express.Router();

  router.get('/', verifyAuth(), async (req, res) => {
    const docs = await db.allDocs({ include_docs: true })
    if (process.env.SINGLE_LIST === 'true') {
      for (row of docs.rows) {
        if (row.doc.admin) return res.redirect(`/wishlist/${row.doc._id}`)
      }
    }
    res.render('wishlists', { title: 'Wishlists', users: docs.rows, totals})
  });

  router.get('/:user', verifyAuth(), async (req, res) => {
    try {
      const dbUser = await db.get(req.params.user);
      if (process.env.SINGLE_LIST === 'true') {
        if (!dbUser.admin) {
          const docs = await db.allDocs({ include_docs: true })
          for (row of docs.rows) {
            if (row.doc.admin) return res.redirect(`/wishlist/${row.doc._id}`)
          }
        }
      }
      const firstCanSee = dbUser.wishlist.findIndex(element => (element.addedBy === req.params.user));
      const wishlistReverse = [...dbUser.wishlist].reverse();
      const lastCanSeeValue = wishlistReverse.find(element => (element.addedBy === req.params.user));
      const lastCanSee = dbUser.wishlist.indexOf(lastCanSeeValue);
      res.render('wishlist', {
        title: `Wishlist - ${dbUser._id}`,
        wishlist: [
          ...dbUser.wishlist.filter(item => item.addedBy === req.params.user),
          ...dbUser.wishlist.filter(item => item.addedBy !== req.params.user)
        ],
        firstCanSee,
        lastCanSee
      });
    } catch (error) {
      req.flash('error', error);
      return res.redirect('/wishlist');
    }
  });

  router.post('/:user', verifyAuth(), async (req, res) => {
    if (!req.body.itemUrlOrName) {
      req.flash('error', 'Item URL or Name is required')
      return res.redirect(`/wishlist/${req.params.user}`)
    }
    const potentialUrl = req.body.itemUrlOrName.split(' ').pop();
    const url = ValidURL(potentialUrl);
    const item = {};
    let productData;
    try {
      if (url) productData = await getProductName(url, config.proxyServer);
    } catch (err) {
      req.flash('error', err.toString());
    }
    item.name = (productData ? productData.name : '');
    item.price = productData?.price
    item.image = productData?.image
    item.addedBy = req.user._id;
    item.pledgedBy = (req.user._id === req.params.user ? undefined : req.user._id);
    item.note = req.body.note;
    if (url) item.url = url;
    if (!url) item.name = req.body.itemUrlOrName
    item.id = u64.encode(new Date().getTime().toString());
    const doc = await db.get(req.params.user);
    doc.wishlist.push(item);
    try {
      await db.put(doc);
    } catch {
      req.flash('error', 'Items are being added too quickly. Please try again.')
      return res.redirect(`/wishlist/${req.params.user}`)
    }
    req.flash(
      'success',
      (
        req.user._id === req.params.user
        ? 'Added item to wishlist'
        : `Pleged item for ${req.params.user}`
      )
    );
    res.redirect(`/wishlist/${req.params.user}`);
  });

  router.post('/:user/pledge/:itemId', verifyAuth(), async (req, res) => {
    const docs = await db.allDocs({ include_docs: true });
    for (let i = 0; i < docs.rows.length; i++) {
      for (let j = 0; j < docs.rows[i].doc.wishlist.length; j++) {
        if (docs.rows[i].doc.wishlist[j].id === req.params.itemId) {
          if (docs.rows[i].doc.wishlist[j].pledgedBy !== undefined) {
            req.flash('error', 'Item already pledged for');
            return res.redirect(`/wishlist/${req.params.user}`);            
          }
          docs.rows[i].doc.wishlist[j].pledgedBy = req.user._id;
          await db.put(docs.rows[i].doc);
          req.flash('success', 'Successfully pledged for item!');
          return res.redirect(`/wishlist/${req.params.user}`);
        }
      }
    }
  });
  router.post('/:user/unpledge/:itemId', verifyAuth(), async (req, res) => {
    const docs = await db.allDocs({ include_docs: true });
    for (let i = 0; i < docs.rows.length; i++) {
      for (let j = 0; j < docs.rows[i].doc.wishlist.length; j++) {
        if (docs.rows[i].doc.wishlist[j].id === req.params.itemId) {
          if (docs.rows[i].doc.wishlist[j].pledgedBy !== req.user._id) {
            req.flash('error', 'You did not pledge for this');
            return res.redirect(`/wishlist/${req.params.user}`);            
          }
          docs.rows[i].doc.wishlist[j].pledgedBy = undefined;
          if (docs.rows[i].doc.wishlist[j].addedBy === req.user._id) docs.rows[i].doc.wishlist.splice(j, 1);
          await db.put(docs.rows[i].doc);
          req.flash('success', 'Successfully unpledged for item');
          return res.redirect(`/wishlist/${req.params.user}`);
        }
      }
    }
    req.flash('error', 'Failed to find item');
    return res.redirect(`/wishlist/${req.params.user}`);
  });

  router.post('/:user/remove/:itemId', verifyAuth(), async (req, res) => {
    if (req.user._id !== req.params.user) {
      req.flash('error', 'Not correct user');
      return res.redirect(`/wishlist/${req.params.user}`);
    }
    const doc = await db.get(req.user._id);
    for (let i = 0; i < doc.wishlist.length; i++) {
      if (doc.wishlist[i].id === req.params.itemId) {
        doc.wishlist.splice(i, 1);
        await db.put(doc);
        req.flash('success', 'Successfully removed from wishlist');
        return res.redirect(`/wishlist/${req.params.user}`);
      }
    }
    req.flash('error', 'Failed to find item');
    return res.redirect(`/wishlist/${req.params.user}`);
  });

  router.post('/:user/move/:direction/:itemId', verifyAuth(), async (req, res) => {
    if (req.user._id !== req.params.user) {
      req.flash('error', 'Not correct user');
      return res.redirect(`/wishlist/${req.params.user}`);
    }
    const doc = await db.get(req.user._id);
    const wishlist = doc.wishlist;
    if (req.params.direction === 'up') wishlist.reverse();
    let moveFromIndex;
    wishlist.forEach(wish => {
      if (wish.id === req.params.itemId) return moveFromIndex = wishlist.indexOf(wish);
    });
    const moveToIndex = wishlist.findIndex(wish => ( wishlist.indexOf(wish) > moveFromIndex && wish.addedBy === req.user._id ));
    if (moveToIndex < 0 || moveToIndex > wishlist.length) {
      req.flash('error', 'Invalid move');
      return res.redirect(`/wishlist/${req.params.user}`);
    }
    [ wishlist[moveFromIndex], wishlist[moveToIndex] ] = [ wishlist[moveToIndex], wishlist[moveFromIndex] ];
    if (req.params.direction === 'up') wishlist.reverse();
    doc.wishlist = wishlist;
    await db.put(doc);
    req.flash('success', 'Successfully moved item!');
    return res.redirect(`/wishlist/${req.params.user}`);
  });

  router.get('/:user/note/:id', verifyAuth(), async (req, res) => {
    const doc = await db.get(req.params.user);
    const item = doc.wishlist.find(item => item.id === req.params.id)
    res.render('note', { item });
  });
  router.post('/:user/note/:id', verifyAuth(), async (req, res) => {
    const doc = await db.get(req.params.user);
    const wishlist = doc.wishlist;
    for (let i=0; i < wishlist.length; i++) {
      wishlistItem = wishlist[i];
      if (wishlistItem.id !== req.params.id) continue;
      if (req.user._id !== req.params.user && req.user._id !== wishlistItem.addedBy) {
        req.flash('error', 'Invalid user');
        return res.redirect(`/wishlist/${req.params.user}`);
      }
      for (const type of [
        'name', 'note', 'url', 'price', 'image'
      ]) {
        if (!req.body.hasOwnProperty(type)) {
          req.flash('error', `Missing property ${type}`)
          return res.redirect(`/wishlist/${req.params.user}/note/${req.params.id}`)
        }
        wishlistItem[type] = req.body[type]
      }
      wishlist[i] = wishlistItem;
    }
    doc.wishlist = wishlist;
    await db.put(doc);
    req.flash('success', `Successfully saved note!`);
    return res.redirect(`/wishlist/${req.params.user}`);
  });
  router.post('/:user/note/remove/:id', verifyAuth(), async (req, res) => {
    const doc = await db.get(req.params.user);
    const wishlist = doc.wishlist;
    for (let i=0; i < wishlist.length; i++) {
      wishlistItem = wishlist[i];
      if (wishlistItem.id !== req.params.id) continue;
      if (req.user._id !== req.params.user && req.user._id !== wishlistItem.addedBy) {
        req.flash('error', 'Invalid user');
        return res.redirect(`/wishlist/${req.params.user}`);
      }
      if (wishlistItem.note) {
        wishlistItem.note = undefined;
        wishlist[i] = wishlistItem;
      } else {
        req.flash('error', 'Has no note');
        return res.redirect(`/wishlist/${req.params.user}`);      }
    }
    doc.wishlist = wishlist;
    await db.put(doc);
    req.flash('success', 'Successfully removed note');
    return res.redirect(`/wishlist/${req.params.user}`);
  })
  return router;
};